544 matches found
PT-2023-35906 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the check content type and change protocol, process...
ndpi:fuzz_process_packet: Heap-buffer-overflow in check_content_type_and_change_protocol
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5789834441261056 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzprocesspacket Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6080000000fd...
PT-2023-35882 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. The crash involves functions such as ndpi search thrift tcp udp, check ndpi detection func, a...
ndpi:fuzz_ndpi_reader_alloc_fail: Heap-buffer-overflow in ndpi_search_thrift_tcp_udp
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4586233679183872 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireaderallocfail Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...
PT-2023-35877 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search line, check ndpi detection func, and ndpi check flow...
ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_line
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6222984034254848 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000011d Crash State...
PT-2023-35849 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi check punycode string, ndpi match host subprotocol, and chec...
ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_check_punycode_string
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4762941808050176 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000c0...
ndpi:fuzz_tls_certificate: Crash in processCertificateElements
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5131629931921408 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzztlscertificate Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x60400001a10d Crash State:...
PT-2023-35729 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the ndpi workflow process packet function, specifical...
ndpi:fuzz_ndpi_reader_alloc_fail: Heap-buffer-overflow in ndpi_workflow_process_packet
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5030685617553408 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireaderallocfail Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000aecc1 Crash...
ndpi:fuzz_tls_certificate: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5256734259412992 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzztlscertificate Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6200323a3a04 Crash State: NULL Sanitizer: undefined UBSAN Recommend...
ndpi:fuzz_tls_certificate: Crash in processCertificateElements
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6615077058117632 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzztlscertificate Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6040000bed05 Crash State:...
PT-2023-35532 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash involves the functions ndpi free flow data and ndpi fr...
ndpi:fuzz_process_packet: Segv on unknown address in ndpi_free_flow_data
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5403698764578816 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzprocesspacket Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
SUSE CVE-2020-15472
In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpisearchh323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short...
SUSE CVE-2020-15476
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpisearchoracle in lib/protocols/oracle.c...
SUSE CVE-2020-15474
In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c...